Legal information
Personal Data Protection Notice
This personal data protection notice has been prepared in accordance with Article 10 of the Turkish Law No. 6698 on the Protection of Personal Data (“KVKK” or the “Law”) and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform. Its purpose is to inform individuals who visit the seralogicstudio.com website, complete the contact and quote request form, or contact us by email about how their personal data is processed.
In this notice, you will find the purposes for which and the legal bases on which we process your personal data, the parties to whom we may transfer it, the methods by which it is collected, and how you can exercise your rights under the Law. For details on the general data practices of our website, please also review our Privacy Policy.
Data Controller
The data controller is the natural or legal person who determines the purposes and means of processing personal data and who is responsible for establishing and managing the data filing system. With respect to your personal data processed through this website, the data controller is Seralogic.
Seralogic is based in İstanbul, Türkiye. For any questions or requests regarding your personal data, you can reach us at info@seralogicstudio.com.
In this notice, the terms “Seralogic” and “we” refer to the data controller.
Categories of Personal Data Processed
Personal data means any information relating to an identified or identifiable natural person. Through our website and communication channels, your personal data in the following categories may be processed.
- Identity data, namely your first name and surname.
- Contact data, namely your email address and the phone number you optionally provide in the form.
- Customer transaction data, namely the content of the message you send via the contact or quote request form, the name of the company you represent, website address, the service you are interested in, and the request details you share in email correspondence.
- Transaction security data, namely IP address, browser and device information, date and time of visit, and server and application records (log records).
- Marketing and analytics data, namely cookie data, page view and on-site interaction information obtained through analytics and marketing cookies used on the basis of your explicit consent.
Our forms do not request special categories of personal data (for example, information on health, religion or ethnic origin). We kindly ask that you do not enter such information in message fields.
Purposes of Processing Personal Data
The purpose of processing indicates the outcome for which personal data is used. Your personal data is processed in line with the general principles set out in Article 4 of the Law, only for the following purposes and in a manner that is relevant, limited and proportionate to these purposes.
- Receiving, evaluating and responding to your contact and quote requests.
- Planning and conducting preliminary consultation processes regarding our services.
- Preparing quotes and, at your request, carrying out processes aimed at the conclusion of a contract.
- Ensuring that the website operates securely and without interruption, and carrying out information security processes.
- Fulfilling legal obligations and providing information to authorized public institutions and organizations.
- Establishing, exercising or protecting rights in the event of potential disputes.
- Where you have given explicit consent, analyzing website usage, improving content and user experience, and measuring marketing activities.
Legal Bases
A legal basis is the ground set out in the Law that makes the processing of personal data lawful. Your personal data is processed on the basis of the following legal grounds set out in the second paragraph of Article 5 of the KVKK.
- Processing is necessary, provided that it is directly related to the conclusion or performance of a contract, for the personal data of the parties to that contract (Article 5/2-c). Responding to quote and contact requests, preliminary consultation and contract processes rely on this ground.
- Processing is mandatory for the data controller to fulfill its legal obligations (Article 5/2-ç). Record-keeping obligations and obligations to provide information to competent authorities arising from legislation rely on this ground.
- Processing is mandatory for the establishment, exercise or protection of a right (Article 5/2-e). Retaining records that may serve as evidence in potential disputes relies on this ground.
- Processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject (Article 5/2-f). Ensuring website security, keeping log records and using strictly necessary cookies rely on this ground.
Data processed through analytics and marketing cookies is processed solely on the basis of your explicit consent pursuant to the first paragraph of Article 5 of the KVKK. You may withdraw your explicit consent at any time by updating your cookie preferences. Detailed information on the types of cookies used and how to manage your preferences is available in our Cookie Policy.
Method of Collection
The method of collection refers to the channels through which personal data reaches the data controller. Your personal data is collected on the basis of the legal grounds stated above through the following methods.
- Partially automated means, when you complete the contact and quote request form on our website.
- When you send us an email or correspond with us.
- Automated means, through cookies and similar technologies and server records during your visit to the website.
Transfer of Personal Data
A transfer is the sharing of personal data with a recipient other than the data controller. Your personal data may be transferred to the extent necessary to achieve the purposes stated above and in compliance with the conditions set out in Articles 8 and 9 of the KVKK.
Within Türkiye, your personal data may be transferred to suppliers from whom we obtain services, such as companies providing website hosting services and email and information technology service providers. Where requested within the scope of our legal obligations, it may also be transferred to legally authorized public institutions and organizations.
The servers of some of the cloud, email and web analytics service providers we use may be located abroad. In such cases, your personal data is transferred in compliance with the conditions for transfer abroad set out in Article 9 of the KVKK and the related secondary legislation. Accordingly, such a transfer takes place where an adequacy decision exists for the relevant country, where one of the appropriate safeguards provided for in the Law (for example, the standard contract announced by the Personal Data Protection Board) is in place, or where one of the exceptional circumstances listed in the Law applies.
Retention Periods
The retention period is the period during which personal data is kept for the purpose for which it is processed. Your personal data is retained for the period required by the applicable legislation or by the purpose of processing.
Upon expiry of this period, or where the reasons requiring processing cease to exist, your personal data is erased, destroyed or anonymized, either ex officio or upon your request, in accordance with Article 7 of the KVKK and the Regulation on the Erasure, Destruction or Anonymization of Personal Data. Records that may need to be used as evidence in potential disputes may be retained for the relevant statutory limitation periods.
Rights of the Data Subject
The data subject is the natural person whose personal data is processed. Pursuant to Article 11 of the KVKK, you may exercise the following rights by applying to the data controller.
- To learn whether your personal data is being processed.
- To request information if your personal data has been processed.
- To learn the purpose of processing your personal data and whether it is used in accordance with that purpose.
- To know the third parties to whom your personal data is transferred, within Türkiye or abroad.
- To request the rectification of your personal data if it has been processed incompletely or inaccurately.
- To request the erasure or destruction of your personal data under the conditions set out in Article 7 of the KVKK.
- To request that the actions taken upon your requests for rectification, erasure or destruction be notified to the third parties to whom your personal data has been transferred.
- To object to any outcome to your detriment resulting from the analysis of the processed data exclusively through automated systems.
- To claim compensation for damages if you suffer damage due to the unlawful processing of your personal data.
Application Procedure
An application is a request submitted by the data subject to the data controller in order to exercise the rights arising from the Law. In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, you may submit your requests under Articles 11 and 13 of the KVKK in writing or by email to info@seralogicstudio.com.
- By sending a written application signed with a secure electronic signature or mobile signature to info@seralogicstudio.com.
- By sending an email to info@seralogicstudio.com from the email address you have previously notified to us and that is registered in our system.
Your application must clearly include your first name and surname, your signature for written applications, your Turkish identity number if you are a citizen of the Republic of Türkiye (for foreign nationals, your nationality and passport number or, if available, identity number), your residential or business address for notification purposes, your email address for notification purposes if any, your phone number if any, and the subject of your request. Any information and documents relating to your request should be attached to the application.
Your applications will be concluded free of charge as soon as possible and within 30 days at the latest, depending on the nature of the request. If the action requires an additional cost, a fee may be charged in accordance with the tariff determined by the Personal Data Protection Board. If your application is rejected, if you find the response insufficient, or if no response is given within the prescribed period, you reserve the right to file a complaint with the Personal Data Protection Board pursuant to Article 14 of the KVKK.
You may also reach us through our contact page for general questions. However, applications regarding the exercise of your rights must be submitted using the methods described above.
Changes
This notice may be updated in line with changes in legislation or in our personal data processing activities. The current version is always published on this page, and in the event of significant changes, information will be provided through appropriate means.
This notice is effective as of the date of its entry into force.
Let’s turn your marketing data into growth